mobbdev 1.0.9 → 1.0.10

package/dist/index.mjs

@@ -164,6 +164,7 @@ var IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
   IssueType_Enum2["Pt"] = "PT";
   IssueType_Enum2["RaceConditionFormatFlaw"] = "RACE_CONDITION_FORMAT_FLAW";
   IssueType_Enum2["RegexInjection"] = "REGEX_INJECTION";
+  IssueType_Enum2["RegexMissingTimeout"] = "REGEX_MISSING_TIMEOUT";
   IssueType_Enum2["SqlInjection"] = "SQL_Injection";
   IssueType_Enum2["Ssrf"] = "SSRF";
   IssueType_Enum2["StringFormatMisuse"] = "STRING_FORMAT_MISUSE";
@@ -751,7 +752,8 @@ var issueTypeMap = {
   ["NON_READONLY_FIELD" /* NonReadonlyField */]: "Non Readonly Field",
   ["CSRF" /* Csrf */]: "Cross-Site Request Forgery (CSRF)",
   ["WEAK_ENCRYPTION" /* WeakEncryption */]: "Weak Encryption Mechanism",
-  ["CODE_IN_COMMENT" /* CodeInComment */]: "Code in Comment"
+  ["CODE_IN_COMMENT" /* CodeInComment */]: "Code in Comment",
+  ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: "Regex Missing Timeout"
 };
 var issueTypeZ = z.nativeEnum(IssueType_Enum);
 var getIssueTypeFriendlyString = (issueType) => {
@@ -1728,7 +1730,8 @@ var fixDetailsData = {
   ["NON_READONLY_FIELD" /* NonReadonlyField */]: void 0,
   ["CSRF" /* Csrf */]: void 0,
   ["WEAK_ENCRYPTION" /* WeakEncryption */]: void 0,
-  ["CODE_IN_COMMENT" /* CodeInComment */]: void 0
+  ["CODE_IN_COMMENT" /* CodeInComment */]: void 0,
+  ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: void 0
 };
 
 // src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
@@ -2080,6 +2083,25 @@ var pt = {
   }
 };
 
+// src/features/analysis/scm/shared/src/storedQuestionData/csharp/regexMissingTimeout.ts
+var regexMissingTimeout = {
+  netVersionGreaterOrEqual7: {
+    content: () => "Is your target framework .NET 7 or greater?",
+    description: () => "",
+    guidance: () => ""
+  },
+  timeout: {
+    content: () => "Enter the timeout in milliseconds",
+    description: () => "If the limit is reached a RegexTimeoutException is thrown, this could be caused by excessive backtracking",
+    guidance: () => ""
+  },
+  useBacktrackingOption: {
+    content: () => "Use non backtracking option",
+    description: () => "If the regex does not need to use backtracking we can disable it using regex options",
+    guidance: () => ""
+  }
+};
+
 // src/features/analysis/scm/shared/src/storedQuestionData/csharp/sqlInjection.ts
 var sqlInjection2 = {
   databaseProvider: {
@@ -2227,6 +2249,7 @@ var vulnerabilities7 = {
   ["OVERLY_BROAD_CATCH" /* OverlyBroadCatch */]: overlyBroadCatch,
   ["TRUST_BOUNDARY_VIOLATION" /* TrustBoundaryViolation */]: trustBoundaryViolation,
   ["PT" /* Pt */]: pt,
+  ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: regexMissingTimeout,
   ["HTTP_ONLY_COOKIE" /* HttpOnlyCookie */]: httpOnlyCookie,
   ["INSECURE_COOKIE" /* InsecureCookie */]: insecureCookie,
   ["WCF_MISCONFIGURATION_THROTTLING_NOT_ENABLED" /* WcfMisconfigurationThrottlingNotEnabled */]: wcfMisconfigurationThrottlingNotEnabled,
@@ -8516,7 +8539,7 @@ var yesOption = {
   describe: chalk6.bold("Skip prompts and use default values")
 };
 var refOption = {
-  describe: chalk6.bold("reference of the repository (branch, tag, commit)"),
+  describe: chalk6.bold("Reference of the repository (branch, tag, commit)"),
   type: "string",
   demandOption: false
 };
@@ -8662,7 +8685,7 @@ function analyzeBuilder(yargs2) {
     describe: chalk8.bold("Hash of the commit"),
     type: "string"
   }).option("mobb-project-name", mobbProjectNameOption).option("y", yesOption).option("ci", ciOption).option("org", organizationIdOptions).option("api-key", apiKeyOption).option("commit-hash", commitHashOption).option("auto-pr", autoPrOption).example(
-    "$0 analyze -r https://github.com/WebGoat/WebGoat -f <your_vulirabitliy_report_path>",
+    "npx mobbdev@latest analyze -r https://github.com/WebGoat/WebGoat -f <your_vulnerability_report_path>",
     "analyze an existing repository"
   ).help();
 }
@@ -8721,7 +8744,7 @@ function reviewBuilder(yargs2) {
     type: "string",
     demandOption: true
   }).example(
-    "$0 review -r https://github.com/WebGoat/WebGoat -f <your_vulirabitliy_report_path>  --ch <pr_last_commit>   --pr <pr_number> --ref <pr_branch_name>  --api-key <api_key> --src-path <your_repo_path>",
+    "npx mobbdev@latest review -r https://github.com/WebGoat/WebGoat -f <your_vulnerability_report_path>  --ch <pr_last_commit>   --pr <pr_number> --ref <pr_branch_name>  --api-key <api_key> --src-path <your_repo_path>",
     "add fixes to your pr"
   ).help();
 }
@@ -8741,7 +8764,7 @@ async function reviewHandler(args) {
 // src/args/commands/scan.ts
 function scanBuilder(args) {
   return args.coerce("scanner", (arg) => arg.toLowerCase()).option("repo", repoOption).option("ref", refOption).option("scanner", scannerOptions).option("org", organizationIdOptions).option("mobb-project-name", mobbProjectNameOption).option("y", yesOption).option("ci", ciOption).option("api-key", apiKeyOption).option("cx-project-name", projectNameOption).option("auto-pr", autoPrOption).example(
-    "$0 scan -r https://github.com/WebGoat/WebGoat",
+    "npx mobbdev@latest scan -r https://github.com/WebGoat/WebGoat",
     "Scan an existing repository"
   ).help();
 }
@@ -8766,7 +8789,7 @@ async function scanHandler(args) {
 // src/args/commands/token.ts
 function addScmTokenBuilder(args) {
   return args.option("scm-type", scmTypeOption).option("url", urlOption).option("token", scmTokenOption).option("organization", scmOrgOption).option("refresh-token", scmRefreshTokenOption).option("api-key", apiKeyOption).option("ci", ciOption).example(
-    "$0 add-scm-token --scm-type Ado --url https://dev.azure.com/adoorg/test/_git/repo --token abcdef0123456 --organization myOrg",
+    "npx mobbdev@latest add-scm-token --scm-type Ado --url https://dev.azure.com/adoorg/test/_git/repo --token abcdef0123456 --organization myOrg",
     `Add your SCM (${Object.values(scmFriendlyText).join(", ")}) token to Mobb to enable automated fixes.`
   ).help().demandOption(["url", "token"]);
 }
@@ -8843,7 +8866,7 @@ var parseArgs = async (args) => {
     addScmTokenBuilder,
     addScmTokenHandler
   ).example(
-    "$0 scan -r https://github.com/WebGoat/WebGoat",
+    "npx mobbdev@latest scan -r https://github.com/WebGoat/WebGoat",
     "Scan an existing repository"
   ).command({
     command: "*",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.0.9",
+  "version": "1.0.10",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.js",